Elite Gaming Ladders 3.5 - 'ladder[id]' SQL Injection

Author: ahwak2000
type: webapps
platform: php
port: 0
date_added: 2010-06-18
date_updated: 2010-11-12
verified: 1
codes: CVE-2010-5014;OSVDB-76890
tags: 
aliases: 
screenshot_url: 
application_url: 

[-] Elite Gaming Ladders v3.5 SQL Injection Vulnerability [-]


---Date : 2010-06-19
---Author : ahwak2000
---Email : z.u5[at]hotmail.com
[-] Script Info [-]
---Home : http://eliteladders.com/

[-] Vulnerability [-]


http://site.com/[path]/standings.php?ladder[id]=[SQL INj]